Read the docs
TI-2016-06086 Aliases CVE-2016-7079GHSA-wxpj-3x4g-grwp

The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X…

Priority LOW 34CWE-476Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-476.

Summary

The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080.

Why it matters now

EPSS 0.00367 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*up to 10.0.8VulnerableVMware
cpe:2.3:a:vmware:tools:10.0.0:*:*:*:*:*:*:*10.0.0VulnerableVMware
cpe:2.3:a:vmware:tools:10.0.5:*:*:*:*:*:*:*10.0.5VulnerableVMware
cpe:2.3:a:vmware:tools:10.0.6:*:*:*:*:*:*:*10.0.6VulnerableVMware
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*all versionsRunning onApple
cpe:2.3:a:vmware:tools:9.0.0:*:*:*:*:*:*:*9.0.0VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.1:*:*:*:*:*:*:*9.0.1VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.5:*:*:*:*:*:*:*9.0.5VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.10:*:*:*:*:*:*:*9.0.10VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.11:*:*:*:*:*:*:*9.0.11VulnerableVMware
  • cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:* Versions up to 10.0.8 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:10.0.0:*:*:*:*:*:*:* Versions 10.0.0 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:10.0.5:*:*:*:*:*:*:* Versions 10.0.5 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:10.0.6:*:*:*:*:*:*:* Versions 10.0.6 Vulnerable ·VMware
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions all versions Running on ·Apple
  • cpe:2.3:a:vmware:tools:9.0.0:*:*:*:*:*:*:* Versions 9.0.0 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.1:*:*:*:*:*:*:* Versions 9.0.1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.5:*:*:*:*:*:*:* Versions 9.0.5 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.10:*:*:*:*:*:*:* Versions 9.0.10 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.11:*:*:*:*:*:*:* Versions 9.0.11 Vulnerable ·VMware
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:vmware:tools:9.0.12:*:*:*:*:*:*:*9.0.12VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.13:*:*:*:*:*:*:*9.0.13VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.15:*:*:*:*:*:*:*9.0.15VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.16:*:*:*:*:*:*:*9.0.16VulnerableVMware
cpe:2.3:a:vmware:tools:9.0.17:*:*:*:*:*:*:*9.0.17VulnerableVMware
cpe:2.3:a:vmware:tools:9.4.0:*:*:*:*:*:*:*9.4.0VulnerableVMware
cpe:2.3:a:vmware:tools:9.4.5:*:*:*:*:*:*:*9.4.5VulnerableVMware
cpe:2.3:a:vmware:tools:9.4.10:*:*:*:*:*:*:*9.4.10VulnerableVMware
cpe:2.3:a:vmware:tools:9.4.11:*:*:*:*:*:*:*9.4.11VulnerableVMware
cpe:2.3:a:vmware:tools:9.4.12:*:*:*:*:*:*:*9.4.12VulnerableVMware
cpe:2.3:a:vmware:tools:9.4.15:*:*:*:*:*:*:*9.4.15VulnerableVMware
cpe:2.3:a:vmware:tools:9.10.0:*:*:*:*:*:*:*9.10.0VulnerableVMware
cpe:2.3:a:vmware:tools:9.10.1:*:*:*:*:*:*:*9.10.1VulnerableVMware
cpe:2.3:a:vmware:tools:9.10.5:*:*:*:*:*:*:*9.10.5VulnerableVMware
  • cpe:2.3:a:vmware:tools:9.0.12:*:*:*:*:*:*:* Versions 9.0.12 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.13:*:*:*:*:*:*:* Versions 9.0.13 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.15:*:*:*:*:*:*:* Versions 9.0.15 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.16:*:*:*:*:*:*:* Versions 9.0.16 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.0.17:*:*:*:*:*:*:* Versions 9.0.17 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.4.0:*:*:*:*:*:*:* Versions 9.4.0 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.4.5:*:*:*:*:*:*:* Versions 9.4.5 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.4.10:*:*:*:*:*:*:* Versions 9.4.10 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.4.11:*:*:*:*:*:*:* Versions 9.4.11 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.4.12:*:*:*:*:*:*:* Versions 9.4.12 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.4.15:*:*:*:*:*:*:* Versions 9.4.15 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.10.0:*:*:*:*:*:*:* Versions 9.10.0 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.10.1:*:*:*:*:*:*:* Versions 9.10.1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:tools:9.10.5:*:*:*:*:*:*:* Versions 9.10.5 Vulnerable ·VMware

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-7079
  2. 2026-10-03 Alias added: GHSA-wxpj-3x4g-grwp

References

Advisory 1

  • TI-2025-27491 VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple… KEVCVSS 3.1HIGH 7.8
  • TI-2023-07286 VMware Tools Authentication Bypass Vulnerability KEVCVSS 3.1LOW 3.9
  • TI-2016-04622 Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware… CVSS 3.1HIGH 7.8
  • TI-2023-07316 Authentication bypass by capture-replay in VMware Tools CVSS 3.1HIGH 7.5
  • TI-2021-05043 Uncontrolled search path in VMware Tools for Windows, VMware Remote Console for Windows… CVSS 3.1HIGH 7.8
  • TI-2023-16924 Improper signature verification in VMware Tools CVSS 3.1HIGH 7.5
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences